Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230332e302f32342d3234203d3e20323638323239.roa
File: 34352e3233352e3230332e302f32342d3234203d3e20323638323239.roa (raw, json)
Hash identifier: uAdN6FTpTMWXQNULIQ+5MR8syS85DH/QUz4wxZRbsx8=
Subject key identifier: BF:09:C1:5C:E3:75:F7:4A:1A:95:44:7B:95:8C:B1:22:E3:63:98:A5
Certificate issuer: /CN=321510E0836AA48D9EE42A00551338BB403CE659
Certificate serial: 0345F789A5035BB5A2B65B941407F99F053E145B
Authority key identifier: 32:15:10:E0:83:6A:A4:8D:9E:E4:2A:00:55:13:38:BB:40:3C:E6:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/321510E0836AA48D9EE42A00551338BB403CE659.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230332e302f32342d3234203d3e20323638323239.roa
Signing time: Wed 03 Jul 2024 21:10:25 +0000
ROA not before: Wed 03 Jul 2024 21:05:25 +0000
ROA not after: Wed 02 Jul 2025 21:10:25 +0000
asID: 268229
IP address blocks: 45.235.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:45:f7:89:a5:03:5b:b5:a2:b6:5b:94:14:07:f9:9f:05:3e:14:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321510E0836AA48D9EE42A00551338BB403CE659
Validity
Not Before: Jul 3 21:05:25 2024 GMT
Not After : Jul 2 21:10:25 2025 GMT
Subject: CN=BF09C15CE375F74A1A95447B958CB122E36398A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:11:6b:2e:d5:ad:d0:ad:2a:55:77:ec:d1:
85:db:07:99:2b:4e:3a:25:d8:e2:c6:6d:4e:6e:d1:
09:e4:81:20:c1:2b:f6:6b:b5:c2:53:95:47:83:e8:
10:73:30:f8:47:4a:da:ac:3a:40:96:a0:c0:03:52:
67:ac:93:a8:90:9f:13:7b:50:e0:d9:37:01:ec:f7:
c7:2d:dc:a0:f7:49:ac:df:96:b3:ee:c2:f2:21:be:
e3:c7:96:03:ab:45:42:13:fe:09:f8:6f:5f:23:8b:
52:60:bb:ce:91:2a:3d:87:4b:00:2c:a3:b0:74:48:
f2:b0:ea:86:ae:ac:fa:dd:32:90:f8:0d:b2:1d:79:
40:3f:1f:8f:f7:88:d7:9c:ab:7a:ab:1a:41:0a:ef:
ec:40:f5:b0:7f:ea:b6:a9:fd:5e:63:3f:3b:dd:a0:
a0:92:bc:a9:b9:ac:53:6e:be:07:e0:4f:8f:36:54:
28:a5:44:28:c7:8e:eb:03:d5:93:8c:d4:f4:8c:e9:
a4:42:49:7b:af:d7:bf:ad:b4:08:9b:f4:fd:16:de:
85:88:b3:79:cb:34:d9:14:33:cc:05:40:04:ee:0a:
4d:96:1f:a0:02:92:be:23:8a:b8:fa:24:bb:7e:73:
7c:42:6c:5e:6d:53:6b:9d:40:b4:0c:c4:c3:a0:82:
ef:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:09:C1:5C:E3:75:F7:4A:1A:95:44:7B:95:8C:B1:22:E3:63:98:A5
X509v3 Authority Key Identifier:
keyid:32:15:10:E0:83:6A:A4:8D:9E:E4:2A:00:55:13:38:BB:40:3C:E6:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/321510E0836AA48D9EE42A00551338BB403CE659.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/321510E0836AA48D9EE42A00551338BB403CE659.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230332e302f32342d3234203d3e20323638323239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.203.0/24
Signature Algorithm: sha256WithRSAEncryption
37:2a:83:55:cb:48:d7:47:94:66:76:1d:22:8e:ac:e3:bb:eb:
0e:fc:2f:6f:dd:8b:90:e2:b0:64:b0:b3:d9:ee:03:65:1f:9b:
ba:cd:60:3a:55:c1:97:f2:56:91:0e:5b:67:43:08:d0:96:8a:
97:a2:b5:64:ee:c0:ea:d7:a1:02:8c:d4:43:c6:eb:58:a9:71:
df:8d:df:7a:b3:1b:b4:00:73:ca:da:07:1f:45:b6:fb:82:4c:
94:10:42:3f:11:ba:79:6f:da:9d:25:5c:8f:45:8a:5a:16:ee:
41:24:b4:e2:ee:b3:cb:d1:c4:06:97:83:71:ec:3b:3b:c8:49:
5c:0b:7e:b7:ad:34:61:5b:b5:ea:6a:d9:9a:ed:50:a7:90:de:
cb:e0:16:a3:21:c3:8b:7d:ff:ae:ae:d4:a6:2e:db:ee:0c:0f:
78:97:c2:67:84:39:ae:19:0e:f2:70:f8:57:29:2e:3f:94:75:
a6:f8:39:34:c2:25:3d:e7:d7:5b:36:c6:ee:e4:63:56:69:ef:
e5:48:a8:b9:6a:d8:75:a5:29:82:1a:71:12:0c:5d:de:1a:1d:
cc:3d:00:f8:09:85:3d:4e:67:d7:6a:fc:0b:46:4d:3e:3f:97:
16:f9:db:67:ab:25:24:ca:10:fa:db:af:55:d3:27:92:47:64:
25:4f:59:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:19:18 2025 by rpki-client